NixOS/nixpkgs — pull request #4938 by peti (2014-11-11 12:32:41+00:00)
Title: grsecurity: add GRKERNSEC_DENYUSB option (disabled by default)

This option tells the kernel to ignore plug-in events of USB devices. Useful to protect against attacks with malicious hardware. Currently disabled by default, though.